Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5444/eWB3hQy99mpdHtCGVEwf05l0pkA.roa
File:                     eWB3hQy99mpdHtCGVEwf05l0pkA.roa (raw, json)
Hash identifier:          KlFxL5N/TLvZj6fAIRUxTpTdTB3z0N5vxdHvRMlaz4c=
Subject key identifier:   79:60:77:85:0C:BD:F6:6A:5D:1E:D0:86:54:4C:1F:D3:99:74:A6:40
Certificate issuer:       /CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
Certificate serial:       4E
Authority key identifier: 3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/eWB3hQy99mpdHtCGVEwf05l0pkA.roa
Signing time:             Tue 31 Mar 2026 07:52:06 +0000
ROA not before:           Tue 31 Mar 2026 07:52:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131984
IP address blocks:        103.162.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B709E12C472AED3DC52428A9C8B56CA21C8FCA1
        Validity
            Not Before: Mar 31 07:52:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=796077850CBDF66A5D1ED086544C1FD39974A640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:be:b5:1a:ef:51:18:ae:38:a9:09:78:e0:
                    2d:1d:33:32:f0:43:8c:8a:70:e7:4d:49:01:38:f6:
                    16:04:cb:6d:17:21:d4:01:c3:37:e6:42:4c:40:be:
                    63:2b:09:7f:15:d8:5d:9b:97:f9:47:49:3a:33:e6:
                    7f:c9:c9:16:6c:1a:f9:f0:af:1b:7c:8d:45:8a:82:
                    69:9f:11:3f:2a:43:94:b5:10:5b:6e:b2:e3:dc:b6:
                    29:8e:36:09:be:56:ba:e6:56:ee:e6:1d:6f:e8:0c:
                    3b:ca:ef:db:4d:2d:c6:9c:f2:aa:78:0f:99:ea:6f:
                    ad:db:0a:eb:18:97:9f:bf:ce:f3:9c:30:93:88:3a:
                    46:da:36:80:c1:00:84:f6:eb:ef:71:67:50:8d:e4:
                    af:6c:60:2e:1b:74:8f:2a:d5:82:20:f0:14:e8:c5:
                    b5:f3:2b:e8:27:10:a1:03:4e:c6:ec:32:07:5e:b7:
                    f6:7b:05:25:31:a0:5d:63:ed:0c:4b:44:16:c3:9f:
                    e2:3d:0e:a8:9c:8d:b0:ce:38:30:80:34:a8:87:93:
                    d5:f6:36:71:4f:75:35:f7:8a:cb:a3:1b:5c:9f:c2:
                    bf:e2:d9:44:56:e6:b5:d4:da:0b:34:26:43:df:84:
                    db:c3:4c:e8:cc:bd:9e:ce:7a:34:1c:4d:a0:0c:e1:
                    4d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:60:77:85:0C:BD:F6:6A:5D:1E:D0:86:54:4C:1F:D3:99:74:A6:40
            X509v3 Authority Key Identifier:
                keyid:3B:70:9E:12:C4:72:AE:D3:DC:52:42:8A:9C:8B:56:CA:21:C8:FC:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/O3CeEsRyrtPcUkKKnItWyiHI_KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O3CeEsRyrtPcUkKKnItWyiHI_KE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5444/eWB3hQy99mpdHtCGVEwf05l0pkA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:4d:7d:c4:9b:30:40:99:4b:fb:6b:9d:17:d3:b9:6a:92:d9:
         09:29:e4:6c:32:79:14:78:1b:4c:a0:5b:db:12:5a:ff:6e:ad:
         3a:0c:56:6f:47:00:fd:7d:11:aa:48:35:a4:ba:1c:f1:42:c7:
         dd:4d:70:dd:5c:33:c0:1d:23:8d:0c:23:5c:1b:7d:75:58:48:
         9a:69:99:e9:dc:ea:23:ad:39:29:35:d8:9e:e3:19:02:96:b2:
         0c:3d:d5:cd:88:0b:da:84:cc:b4:f2:a6:3c:f0:bb:89:6b:af:
         3f:4c:d6:ec:cc:27:e8:aa:65:cb:1d:25:35:eb:00:e4:0a:47:
         08:41:d7:30:07:79:7a:fe:35:62:33:7c:be:1e:fb:c6:65:7d:
         48:9a:72:f7:58:62:32:f6:5a:d6:eb:6d:4e:04:51:53:f4:39:
         48:c1:88:9a:8d:15:08:66:be:26:d3:3c:99:4c:17:6c:b9:16:
         73:4e:cc:53:83:5a:15:9b:8f:cc:d0:0a:ff:e1:a5:8a:31:72:
         b5:4b:0f:ee:81:1d:e6:9e:ea:a7:fe:cc:34:9a:fc:3b:f1:bc:
         a6:bf:96:e4:8b:57:7a:82:ed:b3:8b:cf:fb:1e:23:9c:18:02:
         e6:35:72:bd:a6:74:e1:86:d5:84:72:fa:5e:e6:ee:84:30:c7:
         92:5c:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:03 2026 by rpki-client